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(57) Abstract: The invention sets forth an 
authentication method for use in a system 
including a first entity and a second entuy 
in a network, the first entity being adapted 
to authenticate the second entity and data 
received therefrom, both first and second 
entities storing the same secret key. The 
method is implemented in a smart card such 
as a USIM card, including : a memory storing 
authentication algorithms and keys; means 
for receiving a message authenticating code 
and other parameter, means for computing 
an expected code fi-om said other parameters 
ami &om said secret key; means for comiwnng 
said message authenticating code received and 
said expected code; and means for aborting 
authentication if the message authenticating 
code received and the expected code do not 
match. The smart card further compnses a 
failure counter adapted to store the numter 
of abortion occurences, and means for 
updating said failure counter every time ttie 
comparing means indicate that said «iessage 
authenticating code and said expected code do 
not match. Thanks to its built-in failure counter 
and the fact that the updating of this counter 
is controlled fiom inside the card, the card 
becomes tamper-resistant against reiterated 
fraudulent authentication attempts. 
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